From 2e376c5849d8717b5d8b8f4a779ea03490625c58 Mon Sep 17 00:00:00 2001
From: Dietmar Maurer <dietmar@proxmox.com>
Date: Thu, 26 Jan 2012 09:39:02 +0100
Subject: [PATCH] only add Permissions.Modify to SysAdmin role

---
 PVE/AccessControl.pm | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index ee731d8..331823e 100644
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -540,7 +540,6 @@ my $privgroups = {
 	    'VM.Modify', 
 	    'VM.Allocate', 
 	    'VM.Migrate',
-	    'Permissions.Modify',
 	],
 	user => [
 	    'VM.Console', 
@@ -556,6 +555,7 @@ my $privgroups = {
 	    'Sys.Modify', # edit/change node settings
 	],
 	admin => [
+	    'Permissions.Modify',
 	    'Sys.Console',    
 	    'Sys.Syslog',
 	],
@@ -565,9 +565,7 @@ my $privgroups = {
 	],
     },
     Datastore => {
-	root => [
-	    'Permissions.Modify',
-	],
+	root => [],
 	admin => [
 	    'Datastore.Allocate',
 	],
-- 
2.39.2